Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
File:                     T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json)
Hash identifier:          NkCuHTSoBmmmdOoj19hFdSqz+dOEFggnsBSEFt9rXiE=
Subject key identifier:   0F:A1:FE:B4:79:58:A0:DC:3A:75:B3:B9:F7:58:E2:FE:9F:E0:49:E3
Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
Certificate issuer:       /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Certificate serial:       01901BFEB0F6AA45E4E4F09A3977CC7B8AD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
Manifest number:          0D1C
Signing time:             Sat 15 Jun 2024 13:03:14 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:14 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:14 +0000
Files and hashes:         1: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: Q6H3fOSV9OJP5OLtjeUQTuao4iA7+nd3bG2LfZwsS1c=)
                          2: XB6dqnG-YNBlbpgnvzbU8peLzU8.roa (hash: mF/8rZzx+Rt7wN2ria/Ji5BgAnMB6QerrzswiCHxeRA=)
                          3: gsl-IpGyIm07XH5zWOchrUQ8ARU.roa (hash: Xg2MIz9uYOnYjYqlucDdwqu8UaNslEqewYdz1eDwKs4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:b0:f6:aa:45:e4:e4:f0:9a:39:77:cc:7b:8a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
        Validity
            Not Before: Jun 15 13:03:14 2024 GMT
            Not After : Jun 16 13:03:14 2024 GMT
        Subject: CN=0fa1feb47958a0dc3a75b3b9f758e2fe9fe049e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:08:cd:1b:89:84:72:dd:31:cd:27:01:37:2a:
                    cd:35:fd:d1:7e:e2:bf:80:85:f8:74:e4:bc:bb:9f:
                    b0:2a:32:6c:33:5f:fd:82:6c:0f:9d:81:90:e1:41:
                    86:ac:a2:e9:06:fe:d0:40:b7:aa:ff:f9:1d:9b:cb:
                    66:f2:6b:ca:e9:4b:93:b6:7d:bb:f9:61:a9:6b:4f:
                    d3:c1:d8:f4:6a:0e:52:eb:fc:95:33:e2:9c:2a:54:
                    1f:6c:29:1e:46:bf:ef:46:0a:c3:70:a7:eb:ca:c4:
                    28:ad:98:62:cb:09:ef:71:5f:12:ca:9c:e1:f6:b4:
                    f4:30:a2:04:dc:b6:5b:8a:a8:8e:b4:d0:a4:b6:c4:
                    04:24:36:73:a1:aa:9e:6b:4c:b3:05:a0:08:16:58:
                    e9:95:30:bc:79:1b:d3:77:b5:17:10:a7:f5:5e:71:
                    bc:4b:34:d9:3f:ad:fc:66:35:77:ea:b2:33:9e:b8:
                    55:9e:94:49:15:d5:53:a5:80:4f:45:1a:88:5b:b3:
                    d2:af:a0:b9:c9:8b:54:a4:89:2c:55:00:d1:9a:bd:
                    d7:ee:46:b0:2c:ba:f4:9a:1e:e0:62:b9:9f:82:a6:
                    41:8a:2d:db:db:96:c1:22:26:1e:61:6c:a7:f6:ad:
                    e0:81:d9:77:3d:85:37:d0:ab:12:23:93:4d:9d:aa:
                    b5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A1:FE:B4:79:58:A0:DC:3A:75:B3:B9:F7:58:E2:FE:9F:E0:49:E3
            X509v3 Authority Key Identifier:
                keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:ef:2d:37:b6:b4:f9:a1:79:03:ae:e4:1c:4a:a9:a4:c2:2d:
         43:df:65:c3:61:ac:36:8f:e2:a1:4f:48:55:28:1e:31:e9:46:
         60:8f:45:d2:81:58:79:f9:f1:5f:c8:1a:d3:79:4c:4f:53:1e:
         2e:76:92:46:e7:e2:a5:dc:de:7a:7d:fd:1b:78:cb:37:7c:0f:
         8d:44:8a:32:86:52:35:ce:89:81:3d:17:e6:ac:42:81:87:ec:
         b0:b3:5f:c2:45:ce:1f:f7:78:35:57:36:ce:2d:40:19:3e:2c:
         33:f8:45:a1:61:05:c5:75:04:d6:0c:f9:09:d1:f1:53:89:27:
         42:d5:c2:47:36:1a:b4:76:d2:f5:4e:5c:8b:10:dc:ff:78:1b:
         ea:d2:92:de:64:a5:29:73:83:a2:50:45:09:a6:25:bb:b7:76:
         e6:f4:02:9a:8f:54:e3:e2:11:cf:ff:44:22:f1:3c:a9:d9:1d:
         77:2f:e6:8d:64:43:4a:bb:e1:d8:31:80:6b:1d:dd:fd:25:3e:
         63:e6:6a:dd:18:78:85:56:80:9e:d1:6c:5b:63:f4:03:3d:11:
         95:b5:40:93:eb:1f:85:e4:ee:0f:ce:45:47:3a:bb:35:55:67:
         76:76:74:07:3f:e8:37:48:e3:73:f9:b9:9e:5e:bc:dd:9d:b9:
         26:19:7d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:59:12 2024 by rpki-client on console-ams.rpki-client.org